You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/update-manager/cross-subscription-patching.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,9 +31,9 @@ However, its capabilities go well beyond this. With proper configuration, you ca
31
31
32
32
# [Supported OS type](#tab/sup-os)
33
33
34
-
-**Windows**: Cross-subscription patching supports various versions of Windows Server and Windows operating systems. Ensure that your Windows devices are up-to-date and compatible with the patching process. For more information, see [support matrix for Arc-connected hosts](support-matrix-updates.md#azure-arc-enabled-servers)and [Azure VM for supported images](support-matrix-updates.md#supported-windows-os-images).
34
+
-**Windows**: Cross-subscription patching supports various versions of Windows Server and Windows operating systems. Ensure that your Windows devices are up-to-date and compatible with the patching process. For more information, see [support matrix for Arc-connected hosts](support-matrix-updates.md#azure-arc-enabled-servers)and [Azure VM for supported images](support-matrix-updates.md#azure-marketplacepir-images)
35
35
36
-
-**Linux**: Cross-subscription patching also supports multiple Linux distributions, including most mainstream distributions like Ubuntu, CentOS, and Red Hat Enterprise Linux (RHEL) etc. Ensure that your Linux devices meet the necessary requirements for patching. For more information, see[support matrix for Arc-connected hosts](support-matrix-updates.md#azure-arc-enabled-servers) and [Azure VM for supported images](support-matrix-updates.md#supported-linux-os-images).
36
+
-**Linux**: Cross-subscription patching also supports multiple Linux distributions, including most mainstream distributions like Ubuntu, CentOS, and Red Hat Enterprise Linux (RHEL) etc. Ensure that your Linux devices meet the necessary requirements for patching. For more information, see[support matrix for Arc-connected hosts](support-matrix-updates.md#azure-arc-enabled-servers) and [Azure VM for supported images](support-matrix-updates.md#azure-marketplacepir-images).
title: Extended Security Updates (ESU) for Windows Server with Azure Update Manager
3
+
description: Information on enrolling and managing Extended Security Updates (ESU) for Windows Server 2012 and 2012 R2 using Azure Update Manager.
4
+
ms.service: azure-update-manager
5
+
author: SnehaSudhirG
6
+
ms.author: sudhirsneha
7
+
ms.date: 02/26/2025
8
+
ms.topic: overview
9
+
---
10
+
11
+
# Extended Security Updates (ESU) for Windows Server
12
+
13
+
This article provides information on ESU on Azure VMs and Azure Arc machines.
14
+
15
+
ESUs are available by default to Azure Virtual machines Azure ESU. Using Azure Update Manager, you can deploy Extended Security Updates for your Azure Arc-enabled Windows Server 2012 / R2 machines.
16
+
17
+
## Enroll Windows Server 2012 ESU on Arc machines
18
+
19
+
To enroll in Windows Server 2012 Extended Security Updates on Arc connected machines, follow the guidance on [How to get Extended Security Updates (ESU) for Windows Server 2012 and 2012 R2 via Azure Arc](/windows-server/get-started/extended-security-updates-deploy#extended-security-updates-enabled-by-azure-arc).
20
+
21
+
22
+
## Next steps
23
+
24
+
-[View updates for a single machine](view-updates.md)
25
+
-[Deploy updates now (on-demand) for a single machine](deploy-updates.md)
Copy file name to clipboardExpand all lines: articles/update-manager/manage-arc-enabled-servers-programmatically.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -74,7 +74,7 @@ The following table describes the elements of the request body:
74
74
|`windowsParameters - kbNumbersToExclude`| List of Windows Update KB Ids that are available to the machine and that should **not** be installed. If you've included any 'classificationsToInclude', the KBs available in the category will be installed. 'kbNumbersToExclude' is an option to provide list of specific KB IDs that you want to ensure don't get installed. For example: `5678`|
75
75
|`maxPatchPublishDate`| This is used to install patches that were published on or before this given max published date.|
76
76
|`linuxParameters`| Parameter options for Guest OS update when machine is running supported Linux distribution |
77
-
|`linuxParameters - classificationsToInclude`| List of categories or classifications of OS updates to apply, as supported & provided by Linux OS's package manager used. Acceptable values are: `Critical, Security, Others`. For more information, see [Linux package manager and OS support](support-matrix-updates.md#supported-linux-os-images). |
77
+
|`linuxParameters - classificationsToInclude`| List of categories or classifications of OS updates to apply, as supported & provided by Linux OS's package manager used. Acceptable values are: `Critical, Security, Others`. For more information, see [Linux package manager and OS support](support-matrix-updates.md#azure-marketplacepir-images). |
78
78
|`linuxParameters - packageNameMasksToInclude`| List of Linux packages that are available to the machine and need to be installed. If you've included any 'classificationsToInclude', the packages available in the category will be installed. 'packageNameMasksToInclude' is an option to provide list of packages over and above that you want to get installed. For example: `mysql, libc=1.0.1.1, kernel*`|
79
79
|`linuxParameters - packageNameMasksToExclude`| List of Linux packages that are available to the machine and should **not** be installed. If you've included any 'classificationsToInclude', the packages available in the category will be installed. 'packageNameMasksToExclude' is an option to provide list of specific packages that you want to ensure don't get installed. For example: `mysql, libc=1.0.1.1, kernel*`|
Copy file name to clipboardExpand all lines: articles/update-manager/support-matrix-automatic-guest-patching.md
+4-73Lines changed: 4 additions & 73 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,86 +15,17 @@ By enabling automatic guest patching for your Azure Virtual Machines (VMs), you
15
15
16
16
## Supported OS images
17
17
18
-
> [!NOTE]
19
-
>- Automatic VM guest patching, on-demand patch assessment and on-demand patch installation are supported only on VMs created from images with the exact combination of publisher, offer and sku from the below supported OS images list. Custom images or any other publisher, offer, sku combinations aren't supported. More images are added periodically. Don't see your SKU in the list? Request support by filing out [Image Support Request](https://forms.microsoft.com/r/6vfSgT0mFx).
20
-
>- If [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching) is enabled on a VM, then the available Critical and Security patches are downloaded and applied automatically on the VM.
18
+
Automatic VM guest patching, on-demand patch assessment and on-demand patch installation are supported only on VMs created from images with the exact combination of publisher, offer and sku from the below supported OS images list. Custom images or any other publisher, offer, sku combinations aren't supported. More images are added periodically. Don't see your SKU in the list? Request support by filing out [Image Support Request](https://forms.microsoft.com/r/6vfSgT0mFx).
21
19
20
+
If [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching) is enabled on a VM, then the available Critical and Security patches are downloaded and applied automatically on the VM.
22
21
23
-
#### [Supported Windows Images (Hotpatchable)](#tab/win-hotpatch)
For VMs created from customized images even if the Patch orchestration mode is set to `Azure Orchestrated/AutomaticByPlatform`, automatic VM guest patching doesn't work. We recommend that you use scheduled patching to patch the machines by defining your own schedules or install updates on-demand.
94
25
95
26
## Next steps
96
27
97
-
-[View updates for a single machine](view-updates.md)
28
+
-[Supported regions](supported-regions.md)
98
29
-[Deploy updates now (on-demand) for a single machine](deploy-updates.md)
Copy file name to clipboardExpand all lines: articles/update-manager/support-matrix.md
+12-27Lines changed: 12 additions & 27 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,35 +1,32 @@
1
1
---
2
-
title: Azure Update Manager support matrix
3
-
description: This article provides a summary of supported regions and operating system settings.
2
+
title: Azure Update Manager supported OS, update sources, and types
3
+
description: This article provides information on update sources, and types of updates and best practices for managing updates on your Azure VMs and servers.
4
4
ms.service: azure-update-manager
5
5
author: SnehaSudhirG
6
6
ms.author: sudhirsneha
7
-
ms.date: 01/29/2025
7
+
ms.date: 02/26/2025
8
8
ms.topic: overview
9
-
ms.custom: references_regions
10
9
---
11
10
12
11
# Supported updates for Azure Update Manager
13
12
14
-
This article details the Windows and Linux operating systems supported and system requirements for machines or servers managed by Azure Update Manager.
13
+
This article provides detailed information on the supported operating systems, update sources, and types of updates that can be managed using Azure Update Manager. Additionally, it outlines the system requirements for machines or servers managed by Azure Update Manager.
15
14
16
-
### Supported update sources
15
+
## Supported update sources
16
+
17
+
Azure Update Manager honors the update source settings on the machine and will fetch updates accordingly. AUM doesn't publish or provide updates.
17
18
For more information, see the supported [update sources](workflow-update-manager.md#update-source).
18
19
19
-
###Supported update types
20
+
## Supported update types
20
21
The following types of updates are supported.
21
22
22
-
#### Operating system updates
23
-
Update Manager supports operating system updates for both Windows and Linux.
24
-
25
-
Update Manager doesn't support driver updates.
23
+
**Operating system updates** - Azure Update Manager supports operating system updates for both Windows and Linux.
26
24
27
-
#### Extended Security Updates (ESU) for Windows Server
25
+
>[!NOTE]
26
+
> Update Manager doesn't support driver updates.
28
27
29
-
Using Azure Update Manager, you can deploy Extended Security Updates for your Azure Arc-enabled Windows Server 2012 / R2 machines. ESUs are available by default to Azure Virtual machines. To enroll in Windows Server 2012 Extended Security Updates on Arc connected machines, follow the guidance on [How to get Extended Security Updates (ESU) for Windows Server 2012 and 2012 R2 via Azure Arc](/windows-server/get-started/extended-security-updates-deploy#extended-security-updates-enabled-by-azure-arc).
30
28
31
-
32
-
#### Microsoft application updates on Windows
29
+
## Microsoft application updates on Windows
33
30
34
31
By default, the Windows Update client is configured to provide updates only for the Windows operating system.
35
32
@@ -73,18 +70,6 @@ Third party application updates are supported in Azure Update Manager. If you in
73
70
74
71
As Update Manager depends on your machine's OS package manager or update service, ensure that the Linux package manager or Windows Update client is enabled and can connect with an update source or repository. If you're running a Windows Server OS on your machine, see [Configure Windows Update settings](configure-wu-agent.md).
75
72
76
-
## Unsupported workloads
77
-
78
-
The following table lists the workloads that aren't supported.
79
-
80
-
| **Workloads**| **Notes**
81
-
|----------|-------------|
82
-
| Windows client | For client operating systems such as Windows 10 and Windows 11, we recommend [Microsoft Intune](/mem/intune/) to manage updates.|
83
-
| Virtual Machine Scale Sets| We recommend that you use [Automatic upgrades](/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade) to patch the Virtual Machine Scale Sets.|
84
-
| Azure Kubernetes Service nodes| We recommend the patching described in [Apply security and kernel updates to Linux nodes in Azure Kubernetes Service (AKS)](/azure/aks/node-updates-kured).|
85
-
86
-
As Update Manager depends on your machine's OS package manager or update service, ensure that the Linux package manager or Windows Update client is enabled and can connect with an update source or repository. If you're running a Windows Server OS on your machine, see [Configure Windows Update settings](configure-wu-agent.md).
title: Unsupported Workloads for Azure Update Manager
3
+
description: Learn about the workloads that are not supported by Azure Update Manager.
4
+
ms.service: azure-update-manager
5
+
author: SnehaSudhirG
6
+
ms.author: sudhirsneha
7
+
ms.date: 02/26/2025
8
+
ms.topic: overview
9
+
---
10
+
11
+
# Unsupported workloads
12
+
13
+
**Applies to:**:heavy_check_mark: Linux VMs :heavy_check_mark: Windows VMs
14
+
15
+
## Overview
16
+
17
+
This article provides an overview of unsupported operating systems and custom VM images, along with recommendations for alternative update management solutions.
18
+
19
+
Unsupported workloads include operating systems like Windows 10 and 11, which are best managed with Microsoft Intune, as well as custom VM images that might not have the necessary agent installed to receive updates
20
+
21
+
22
+
The following table lists the workloads that aren't supported.
23
+
24
+
| **Workloads**| **Notes**
25
+
|----------|-------------|
26
+
| Windows client | For client operating systems such as Windows 10 and Windows 11, we recommend [Microsoft Intune](/mem/intune/) to manage updates.|
27
+
| Virtual Machine Scale Sets| We recommend that you use [Automatic upgrades](/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade) to patch the Virtual Machine Scale Sets.|
28
+
| Azure Kubernetes Service nodes| We recommend the patching described in [Apply security and kernel updates to Linux nodes in Azure Kubernetes Service (AKS)](/azure/aks/node-updates-kured).|
29
+
30
+
As Update Manager depends on your machine's OS package manager or update service, ensure that the Linux package manager or Windows Update client is enabled and can connect with an update source or repository. If you're running a Windows Server OS on your machine, see [Configure Windows Update settings](configure-wu-agent.md).
31
+
32
+
## Next steps
33
+
34
+
-[Supported regions](supported-regions.md)
35
+
-[Deploy updates now (on-demand) for a single machine](deploy-updates.md)
0 commit comments